Mobile Security
Analyze, instrument and harden Android and iOS applications.
23 tools profiled
How it differs Analyses Android and iOS app binaries, statically and at runtime. The backend APIs an app calls belong to API security or DAST.
Nandee
SaaS platform that scans Android and iOS codebases for mobile-specific vulnerability classes and proposes code-level fixes.
Ostorlab
Mobile application scanner that pairs static binary analysis with instrumented dynamic testing on an extensible agent based engine.
MobSF project
Self hosted framework that performs automated static and dynamic security analysis of Android and iOS application binaries and produces a consolidated report.
Appknox
Mobile application security platform that scans uploaded iOS and Android binaries statically and dynamically and maps findings to compliance frameworks.
Cryptic Apps
Desktop disassembler and decompiler for macOS and Linux, widely used for analyzing Mach-O binaries from iOS and macOS applications.
Guardsquare
Mobile application protection suite providing code obfuscation, encryption and runtime self protection for Android and iOS, alongside the open source ProGuard.
Zimperium
Automated scanner that analyzes compiled Android and iOS builds for security, privacy and compliance issues inside the release pipeline.
Nandee
SaaS platform that scans Android and iOS codebases for mobile-specific vulnerability classes and proposes code-level fixes.
Ostorlab
Mobile application scanner that pairs static binary analysis with instrumented dynamic testing on an extensible agent based engine.
MobSF project
Self hosted framework that performs automated static and dynamic security analysis of Android and iOS application binaries and produces a consolidated report.
Appknox
Mobile application security platform that scans uploaded iOS and Android binaries statically and dynamically and maps findings to compliance frameworks.
Cryptic Apps
Desktop disassembler and decompiler for macOS and Linux, widely used for analyzing Mach-O binaries from iOS and macOS applications.
Guardsquare
Mobile application protection suite providing code obfuscation, encryption and runtime self protection for Android and iOS, alongside the open source ProGuard.
Zimperium
Automated scanner that analyzes compiled Android and iOS builds for security, privacy and compliance issues inside the release pipeline.
Data Theorem
Continuous mobile application security platform that scans pre release and published builds dynamically and maps the backend APIs those apps call.
Talsec
Mobile runtime application self-protection SDK that detects tampering, hooking, rooted or jailbroken devices and emulated environments.
SensePost
Runtime mobile exploration toolkit built on dynamic instrumentation, offering common iOS and Android assessment tasks as ready made commands.
Frida project
Dynamic instrumentation toolkit that injects a scriptable JavaScript engine into running processes to hook, trace and rewrite behavior at runtime.
NowSecure
Mobile application security platform that runs automated static and dynamic testing on real devices and reports against recognized mobile testing standards.
National Security Agency
Software reverse engineering suite with a multi architecture disassembler and decompiler, released as open source by the NSA.
Oversecured
Static analysis service that traces untrusted data through compiled Android and iOS binaries to find exploitable inter-component vulnerabilities.
Data Theorem
Continuous mobile application security platform that scans pre release and published builds dynamically and maps the backend APIs those apps call.
Talsec
Mobile runtime application self-protection SDK that detects tampering, hooking, rooted or jailbroken devices and emulated environments.
SensePost
Runtime mobile exploration toolkit built on dynamic instrumentation, offering common iOS and Android assessment tasks as ready made commands.
Frida project
Dynamic instrumentation toolkit that injects a scriptable JavaScript engine into running processes to hook, trace and rewrite behavior at runtime.
NowSecure
Mobile application security platform that runs automated static and dynamic testing on real devices and reports against recognized mobile testing standards.
National Security Agency
Software reverse engineering suite with a multi architecture disassembler and decompiler, released as open source by the NSA.
Oversecured
Static analysis service that traces untrusted data through compiled Android and iOS binaries to find exploitable inter-component vulnerabilities.